The New York Times reports a U.S. military-owned biometric database containing personal and biometric data on 2,632 individuals was sold privately on eBay. A German security researcher purchased the biometric capture device for $68 and found it retained names, nationalities, photographs, fingerprints and iris scans of individuals tied to wartime efforts in Afghanistan and Iraq. The Times found the information belonged to known terrorists, wanted individuals, U.S. government contractors and U.S.
Pluribus News reports consumer advocates are lobbying for U.S. state legislatures to take up consumer-focused biometric privacy bills during 2023 legislative sessions. American Civil Liberties Union Senior Policy Counsel Chad Marlow said there's "a fairly good chance" at least 10 states introduce legislation on biometrics after his group engaged with multiple states in recent months to coordinate on a consensus framework.
California Privacy Protection Agency Board member Chris Thompson resigned Dec. 16, 2022, according to the agency. Thompson tendered his resignation, effective immediately, at the last board meeting as he becomes chief of staff for Los Angeles Mayor Karen Bass. "As we’ve moved through startup, development, and building stages, I have especially valued Mr.
The new year marks a new chapter in U.S. comprehensive state privacy law. The California Privacy Rights Act and the Virginia Consumer Data Protection Act took force Jan. 1. The CPRA amends the existing California Consumer Privacy Act and hands enforcement powers to the California Privacy Protection Agency. Final CPRA regulations are pending final approval ahead of July 1 enforcement.
CNBC reports Meta's Facebook reached a $725 million settlement, pending court approval, over a class-action privacy lawsuit related to 2018 Cambridge Analytica claims.
In this week's Global News Roundup, leaders of the European Commission, the Council of the European Union and European Parliament signed a declaration on EU digital rights and principles. The Office of the Privacy Commissioner of New Zealand completed its investigation into a ransomware attack on information technology provider Mercury IT.
The IAPP appointed Joe Jones as director of its Research and Insights Team. Jones joins the IAPP after serving as deputy director for international data transfers at the U.K. Department for Digital, Culture, Media and Sport. In his new role, Jones will provide strategic direction and contribute to the development of practical content for privacy professionals around the world. IAPP President and CEO J.
According to Husch Blackwell's "Byte Back," the Colorado attorney general's office released revisions to the Colorado Privacy Act draft rules. The updated rules build off the first draft, published in September 2022, and reflect comments from three stakeholder sessions held November 2022. Modifications include changes to provisions concerning privacy notices, consent and data protection assessments. Tweaks were also made to language around universal opt-out mechanisms and dark patterns. The latest draft is under public comment through Feb.
France's data protection authority, the Commission nationale de l'informatique et des libertés, fined Microsoft 60 million euros for alleged third-party cookie violations. The CNIL carried out investigations over nonconsensual cookie placement and tracking through Microsoft's Bing search engine. The regulator noted it is "materially" and "territorially" competent under the ePrivacy Directive.